| Package | Affected versions | Patched versions |
|---|---|---|
| clickhouse | ≥ 22.6, < 22.6.6.16≥ 22.7, < 22.7.4.16≥ 22.8, < 22.8.2.11≥ 22.9, < 22.9.1.2603< 22.3.12.19 | 22.6.6.1622.7.4.1622.8.2.1122.9.1.260322.3.12.19 |
An issue was discovered in ClickHouse before 22.9.1.2603. An authenticated user (with the ability to load data) could cause a heap buffer overflow and crash the server by inserting a malformed CapnProto object. The fixed versions are 22.9.1.2603, 22.8.2.11, 22.7.4.16, 22.6.6.16, and 22.3.12.19.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free